Comments on: Atmels säkerhetsminne CryptoMemory http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/ Kryptografi och IT-säkerhet på svenska Thu, 08 Jan 2009 18:54:35 +0000 http://wordpress.org/?v=2.5.1 By: Kryptoblog » Blog Archive » Bakdörr in Atmels CryptoMemory http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19750 Kryptoblog » Blog Archive » Bakdörr in Atmels CryptoMemory Wed, 13 Feb 2008 21:39:24 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19750 [...] CryptoMemory är ett litet minne med autenticiering och säkerhetsmekanismer avsedda att skydda innehållet i minnet. Tyvärr har det varit lite skralt med informationen om hur säkerhetsmekanismerna egentligen [...] [...] CryptoMemory är ett litet minne med autenticiering och säkerhetsmekanismer avsedda att skydda innehållet i minnet. Tyvärr har det varit lite skralt med informationen om hur säkerhetsmekanismerna egentligen [...]

]]> By: Joachim http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19748 Joachim Wed, 13 Feb 2008 21:13:51 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19748 Aloha! Actually it is very much in line and spot on! I'll post about it directly. Big thanks for posting the heads up! Aloha!

Actually it is very much in line and spot on! I’ll post about it directly.
Big thanks for posting the heads up!

]]> By: Flylogic http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19745 Flylogic Wed, 13 Feb 2008 20:14:48 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19745 If this post is out of line, please excuse. We have just posted about a backdoor found in Atmel CryptoMemory parts AT88SC153 and AT88SC1608!!! http://www.flylogic.net/blog/?p=25 If this post is out of line, please excuse.

We have just posted about a backdoor found in Atmel CryptoMemory parts AT88SC153 and AT88SC1608!!!

http://www.flylogic.net/blog/?p=25

]]> By: Flylogic http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19005 Flylogic Fri, 01 Feb 2008 04:45:40 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-19005 Yes I will Joachim! Once it's over (Feb 21st). The title is, "Security Failures In Secure Devices". I talk about smartcard IC's, CryptoMemory, Keeloq, PolySi fuses, some MCU's that offer USB used in dongles, and then a dongle I haven't talked about yet on website ;). Thanks! Chris Yes I will Joachim! Once it’s over (Feb 21st). The title is, “Security Failures In Secure Devices”. I talk about smartcard IC’s, CryptoMemory, Keeloq, PolySi fuses, some MCU’s that offer USB used in dongles, and then a dongle I haven’t talked about yet on website ;).

Thanks!
Chris

]]> By: Joachim http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18989 Joachim Thu, 31 Jan 2008 19:22:15 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18989 Aloha! Chris, will you be publishing the presentation from Blackhat after the event. If you do I would love to post an entry with a link to it. You have a great site btw! Aloha!

Chris, will you be publishing the presentation from Blackhat after the event. If you do I would love to post an entry with a link to it. You have a great site btw!

]]> By: Flylogic http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18965 Flylogic Thu, 31 Jan 2008 02:37:57 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18965 Hi, I (owner of Flylogic) Chris Tarnovsky will be talking at Blackhat DC 2008. I will discuss the weakness of the CryptoMemory such as abuse of address fetch to read out Write7 password (master password) and ability to reset the "fuses" with UV light (but watch out for booby trap fuses). Databus attacks are easy to do with 64 samples on the bus you know the write7 password. All contents of CryptoMemory are stored in the clear (no type of encryption at all inside the memory). Databus on 350nm and 500nm is easy to touch with a needle ;-). We will write up on I think AT88SC102 very soon. It seems "Lucy's Laundramat" is using this smartcards in Los Angeles heheheheheheheh. Keep in touch! Hi,

I (owner of Flylogic) Chris Tarnovsky will be talking at Blackhat DC 2008. I will discuss the weakness of the CryptoMemory such as abuse of address fetch to read out Write7 password (master password) and ability to reset the “fuses” with UV light (but watch out for booby trap fuses).

Databus attacks are easy to do with 64 samples on the bus you know the write7 password. All contents of CryptoMemory are stored in the clear (no type of encryption at all inside the memory).

Databus on 350nm and 500nm is easy to touch with a needle ;-).

We will write up on I think AT88SC102 very soon. It seems “Lucy’s Laundramat” is using this smartcards in Los Angeles heheheheheheheh.

Keep in touch!

]]> By: Joachim http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18792 Joachim Sat, 26 Jan 2008 07:48:06 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18792 Aloha! FlyLogic: Welcome to Kryptoblog, your comment is probably the first item here not in Swedish. But you seem capable to decipher the Swedish Chef-language quite well. ;-) Thanks for the info, very interesting information! Would you be able to elaborate on your analysis Atmels CryptoMemory chips? I don't find any blogpost about it. Was there any protection mechanisms beside filler layers? In your estimate, how hard would it be to read out any data from the chips? BTW: Thanks for a great blog. As an ASIC+security guy I find it real treat to read! Aloha!

FlyLogic:
Welcome to Kryptoblog, your comment is probably the first item here not in Swedish. But you seem capable to decipher the Swedish Chef-language quite well. ;-)

Thanks for the info, very interesting information! Would you be able to elaborate on your analysis Atmels CryptoMemory chips? I don’t find any blogpost about it. Was there any protection mechanisms beside filler layers? In your estimate, how hard would it be to read out any data from the chips?

BTW: Thanks for a great blog. As an ASIC+security guy I find it real treat to read!

]]> By: Flylogic http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18779 Flylogic Fri, 25 Jan 2008 23:09:19 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-18779 We have analyzed all of the Atmel CryptoMemories. They were very easilly compromised. Greets from San Diego, California! We have analyzed all of the Atmel CryptoMemories. They were very easilly compromised.

Greets from San Diego, California!

]]> By: Kryptoblog » Blog Archive » Flylogic en spännande blog http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-16512 Kryptoblog » Blog Archive » Flylogic en spännande blog Thu, 22 Nov 2007 09:02:24 +0000 http://strombergson.com/kryptoblog/2007/10/02/atmels-cryptomemory/#comment-16512 [...] annan krets Flylogic attackerat är Atmels CryptoMemory som jag tidigare bloggat om. Här är en bild på sådana chip plockade från sin vanliga miljö för bättre [...] [...] annan krets Flylogic attackerat är Atmels CryptoMemory som jag tidigare bloggat om. Här är en bild på sådana chip plockade från sin vanliga miljö för bättre [...]

]]>